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Summary 


Stores blockhashes in the state, reducing the protocol complexity and the need for 
client implementation complexity in order to process the BLOCKHASH opcode. Also 
extends the range of how far back blockhash checking can go, with the side effect of 
creating direct links between blocks with very distant block numbers, facilitating 
much more efficient initial light client syncing. 


Parameters 


e CONSTANTINOPLE_FORK_BLKNUM : TBD 

e SUPER_USER : 2**160 - 2 

e BLOCKHASH_CONTRACT_ADDR : Oxf0 (ie. 240) 
e BLOCKHASH_CONTRACT_CODE : see below 


Specification 
If block.number == CONSTANTINOPLE_FORK_BLKNUM , then when processing the block, 


before processing any transactions set the code of BBOCKHASH CONTRACT ADDR to 
BLOCKHASH_ CONTRACT CODE. 


If block.number >= CONSTANTINOPLE_FORK_BLKNUM , then when processing a block, before 
processing any transactions execute a call with the parameters: 


e SENDER : SUPER_USER 

e GAs : 1000000 

e To :BLOCKHASH CONTRACT ADDR 

e VALUE : 0 

e DATA: <32 bytes corresponding to the block's prevhash> 
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If block.number >= CONSTANTINOPLE_FORK_BLKNUM + 256 , then the BLOCKHASH opcode 
instead returns the result of executing a call (NOT a transaction) with the parameters: 


e SENDER : 

e GAS : 1000000 

e to :BLOCKHASH CONTRACT ADDR 

e VALUE : 0 

e DATA : 32 byte zero-byte-leftpadded integer representing the stack argument 
with which the opcode was called 


Also, for blocks where block.number >= CONSTANTINOPLE_FORK_BLKNUM , the gas cost is 
increased from 20 to 800 to reflect the higher costs of processing the algorithm in the 
contract code. 


BLOCKHASH CONTRACT CODE 


The Serpent source code is: 


with offset = 0: 
if msg.sender == OxffFFFFFFFFFFFFFEFFFFF FFF FFE FFF EFF Fe : 
with bn = block.number - 1: 
while bn: 
~sstore(offset + ~mod(bn, 256), ~calldataload(®@) ) 
if ~mod(bn, 256): 
~stop() 
bn = ~div(bn, 256) 
offset += 256 
elif ~calldataload(@) >= © and ~calldataload(@) < block.number: 
with tbn = ~calldataload(@): 
with dist_minus_one = block.number - tbn - 1: 
while dist_minus_one >= 256 && ~mod(tbn, 256) == @: 
offset += 256 
tbn = «div(tbn, 256) 
dist_minus_one = ~div(dist_minus_one, 256) 
if dist_minus_one >= 256: 
return(@) 
return(~sload(offset + ~mod(tbn, 256))) 
else: 
return(Q) 


The EVM init code is: 


0x6100F58061000e6000396101035660007 3 FFF FFF FFF FFFFFFF FFF EFE FFF FE FFE F FFF EEE Fe 33141561 


> 


The EVM bytecode that the contract code should be set to is: 
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0x600073ffFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFfFFfFfffe33141561005857600143035b801561005257 


> 


Rationale 


This removes the need for implementations to have an explicit way to look into 
historical block hashes, simplifying the protocol definition and removing a large 
component of the "implied state” (information that is technically state but is not part 
of the state tree) and thereby making the protocol more “pure”. Additionally, it allows 
blocks to directly point to blocks far behind them, which enables extremely efficient 
and secure light client protocols. 


Citation 
Please cite this document as: 


Vitalik Buterin (@vbuterin), "EIP-210: Blockhash refactoring [DRAFT]," Ethereum 
Improvement Proposals, no. 210, February 2017. [Online serial]. Available: 
https://eips.ethereum.org/EIPS/eip-210. 


https://eips.ethereum.org/EIPS/eip-210 


